@commercelayer/agent-cli 0.8.0 → 1.0.0-dev.0

package/dist/api/stub/theme.js

@@ -1,197 +0,0 @@
-// A stand-in for the hosted theme the store Worker renders on every store without a
-// custom storefront: the same settings in the same places (accent, logo or wordmark,
-// hero image or band, tagline), the products by top-level category, a page per product
-// at /products/<sku>. Prices come from what is applied; "Buy" opens the cart permalink.
-// A product without an image shows its tile, and an unset hero the generated one, both
-// drawn at /tiles/ (renderTile) as the store host does.
-import { baseLanguage, cookieLocale, COOKIE, localeOfCountry, localesOf, texts } from './locale.js';
-export const esc = (t) => String(t ?? '').replace(/[&<>"]/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' })[c]);
-/** Black or white, whichever reads better on the accent. */
-function onAccent(hex) {
-    const h = hex.length === 4 ? hex.slice(1).replace(/./g, (c) => c + c) : hex.slice(1);
-    const [r, g, b] = [0, 2, 4].map((i) => parseInt(h.slice(i, i + 2), 16) / 255).map((c) => (c <= 0.03928 ? c / 12.92 : ((c + 0.055) / 1.055) ** 2.4));
-    return 0.2126 * r + 0.7152 * g + 0.0722 * b > 0.179 ? '#000000' : '#ffffff';
-}
-/** The selector's strings, in the store's base language; other languages fall back to en, like the store. */
-const UI = {
-    en: { choose: 'Choose your country', shipping: (c) => `Shipping to ${c}?` },
-    it: { choose: 'Scegli il tuo paese', shipping: (c) => `Spedisci in ${c}?` },
-    fr: { choose: 'Choisissez votre pays', shipping: (c) => `Livraison en ${c} ?` },
-    de: { choose: 'Wählen Sie Ihr Land', shipping: (c) => `Versand nach ${c}?` },
-    es: { choose: 'Elige tu país', shipping: (c) => `¿Envío a ${c}?` },
-};
-const countryName = (cc, ll) => {
-    try {
-        return new Intl.DisplayNames([ll], { type: 'region' }).of(cc) ?? cc;
-    }
-    catch {
-        return cc;
-    }
-};
-const tag = (l) => `${l.language}-${l.country}`;
-const alternates = (locales, rest) => [...locales.map((l) => `<link rel="alternate" hreflang="${tag(l)}" href="/${l.path}${rest === '/' ? '/' : rest}">`), '<link rel="alternate" hreflang="x-default" href="/">'].join('\n');
-/**
- * The hosted theme's routes. With locales (two or more countries, or one): the selector at /,
- * the pages under /<cc>-<ll>/, a cookie that remembers the choice, unprefixed product and
- * category paths sent to the remembered or first locale. Without (not applied since locales
- * exist): the site as it was. null when the path is not the theme's.
- */
-export function renderTheme(r, path, search, headers = {}) {
-    const locales = localesOf(r);
-    if (!locales.length)
-        return renderPage(r, path, search, null);
-    const redirect = (to, extra = {}) => ({ status: 302, headers: { location: to, 'cache-control': 'no-store', ...extra }, body: '' });
-    if (path === '/') {
-        if (locales.length === 1)
-            return redirect(`/${locales[0].path}/`);
-        const chosen = cookieLocale(r, headers.cookie);
-        if (chosen && !search.has('change'))
-            return redirect(`/${chosen.path}/`, { vary: 'Cookie' });
-        const page = selector(r, locales, headers['cf-ipcountry']);
-        page.headers.vary = 'Cookie';
-        return page;
-    }
-    const m = path.match(/^\/([a-z]{2})-([a-z]{2})(\/.*)?$/);
-    if (m) {
-        const l = localeOfCountry(r, m[1]);
-        if (!l)
-            return null;
-        const rest = m[3] ?? '/';
-        if (l.language !== m[2])
-            return redirect(`/${l.path}${rest === '/' ? '/' : rest}`);
-        const page = renderPage(r, rest, search, l);
-        if (page)
-            page.headers['set-cookie'] = `${COOKIE}=${l.path}; Path=/; Max-Age=31536000; SameSite=Lax; Secure`;
-        return page;
-    }
-    if (/^\/(products|categories)\//.test(path))
-        return redirect(`/${(cookieLocale(r, headers.cookie) ?? locales[0]).path}${path}`, { vary: 'Cookie' });
-    return null;
-}
-function selector(r, locales, ipCountry) {
-    const base = baseLanguage(r);
-    const ui = UI[base] ?? UI.en;
-    const markets = Object.values(r.applied?.markets ?? {});
-    const near = ipCountry ? localeOfCountry(r, ipCountry) : undefined;
-    const link = (l) => `<a href="/${l.path}/" hreflang="${tag(l)}" lang="${l.language}">${esc(countryName(l.country, base))}</a>`;
-    const body = `<main class="selector"><h1>${esc(ui.choose)}</h1>${near ? `<p class="suggestion"><a href="/${near.path}/">${esc(ui.shipping(countryName(near.country, base)))}</a></p>` : ''}${markets
-        .map((mk) => {
-        const ls = locales.filter((l) => l.market === mk.code);
-        return ls.length ? `<section><h2>${esc(mk.name)} (${esc(mk.currency)})</h2><ul>${ls.map((l) => `<li>${link(l)}</li>`).join('')}</ul></section>` : '';
-    })
-        .join('')}</main>`;
-    return page(r, { lang: base, title: r.name ?? r.org, head: alternates(locales, '/'), header: '', body, description: ui.choose });
-}
-function page(r, o) {
-    const theme = r.theme ?? {};
-    const color = /^#([0-9a-f]{3}|[0-9a-f]{6})$/i.test(theme.color ?? '') ? theme.color : '#2f5d50';
-    const name = r.name ?? r.org;
-    const badge = theme.badge ? ` <span class="badge">${esc(theme.badge)}</span>` : '';
-    const logo = (theme.logo ? `<img class="logo" src="/${esc(theme.logo.replace(/^\//, ''))}" alt="${esc(name)}">` : `<span class="wordmark">${esc(name)}</span>`) + badge;
-    const html = `<!doctype html>
-<html lang="${esc(o.lang)}">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>${esc(o.title)}</title>
-<meta name="description" content="${esc(o.description)}">
-${o.head ? `${o.head}\n` : ''}<!-- c11r stub: a stand-in for the hosted theme. -->
-<style>:root{--accent:${color};--on-accent:${onAccent(color)}}body{margin:0;font-family:system-ui,sans-serif;color:#16181d}header{display:flex;justify-content:space-between;padding:16px 24px}.logo{max-height:40px}.badge{margin-left:8px;padding:2px 8px;border-radius:999px;background:var(--accent);color:var(--on-accent);font-size:12px;vertical-align:middle}.hero{padding:64px 24px;background-size:cover}.band{background:var(--accent);color:var(--on-accent)}.grid{display:grid;gap:24px;grid-template-columns:repeat(auto-fill,minmax(220px,1fr))}.buy{background:var(--accent);color:var(--on-accent);padding:8px 14px}main{padding:24px}</style>
-</head>
-<body>
-<header><a href="${o.home ?? '/'}">${logo}</a>${o.header}</header>
-${o.body}
-</body>
-</html>
-`;
-    return { status: 200, headers: { 'content-type': 'text/html; charset=utf-8' }, body: html };
-}
-/** The home page and the product pages, for a locale (prefixed paths, its market, its language) or for none (the site as it was). */
-function renderPage(r, path, search, locale) {
-    const products = Object.values(r.applied?.products ?? {});
-    const markets = Object.values(r.applied?.markets ?? {});
-    const theme = r.theme ?? {};
-    const name = r.name ?? r.org;
-    const base = baseLanguage(r);
-    const ll = locale?.language ?? base;
-    const market = locale ? r.applied?.markets[locale.market] : (markets.find((m) => m.code === search.get('market')) ?? markets[0]);
-    const prefix = locale ? `/${locale.path}` : '';
-    const keep = !locale && market && market !== markets[0] ? `?market=${encodeURIComponent(market.code)}` : '';
-    // Under a locale, prices as that country writes them (14,50 € on /it-it/); the site as it was keeps EUR 14.50.
-    const money = (amount, currency) => (locale ? new Intl.NumberFormat(tag(locale), { style: 'currency', currency }).format(amount) : `${currency} ${amount.toFixed(2)}`);
-    const price = (p) => (market && p.prices[market.currency] !== undefined ? money(p.prices[market.currency], market.currency) : '');
-    const tagline = theme.tagline ?? `Ships to ${markets.flatMap((m) => m.countries).join(', ')}`;
-    const img = (url) => (/^https?:/.test(url) ? url : `/${url}`);
-    const lang = ll === base ? '' : `?lang=${ll}`;
-    const image = (p) => p.image_url ? `<img src="${esc(img(p.image_url))}" alt="${esc(texts(p, ll).name)}">` : `<span class="placeholder"><img src="/tiles/${esc(encodeURIComponent(p.sku))}.svg${lang}" alt="${esc(texts(p, ll).name)}" loading="lazy"></span>`;
-    const card = (p) => `<article class="product"><a href="${prefix}/products/${encodeURIComponent(p.sku)}${keep}">${image(p)}<h3>${esc(texts(p, ll).name)}</h3></a><p class="price">${esc(price(p))}</p><a class="buy" href="/buy/${encodeURIComponent(p.sku)}:1">Buy</a></article>`;
-    let title = name;
-    let body;
-    const m = path.match(/^\/products\/([^/]+)$/);
-    if (path === '/') {
-        const groups = new Map();
-        for (const p of products) {
-            const top = texts(p, ll).category?.split(' > ')[0] ?? 'Other';
-            groups.set(top, [...(groups.get(top) ?? []), p]);
-        }
-        const hero = `<section class="hero" style="background-image:url('${esc(theme.hero ? img(theme.hero) : '/tiles/hero.svg')}')">`;
-        body = `${hero}<h1>${esc(name)}</h1><p class="tagline">${esc(tagline)}</p></section><main>${[...groups].map(([k, ps]) => `<section><h2>${esc(k)}</h2><div class="grid">${ps.map(card).join('')}</div></section>`).join('')}</main>`;
-    }
-    else if (m) {
-        const p = r.applied?.products[decodeURIComponent(m[1])];
-        if (!p)
-            return null;
-        const t = texts(p, ll);
-        title = `${t.name} · ${name}`;
-        body = `<main class="product-page">${image(p)}<div>${t.category ? `<p class="category">${esc(t.category)}</p>` : ''}<h1>${esc(t.name)}</h1>${t.description ? `<p>${esc(t.description)}</p>` : ''}<p class="price">${esc(price(p))}</p><a class="buy" href="/buy/${encodeURIComponent(p.sku)}:1">Buy</a></div></main>`;
-    }
-    else
-        return null;
-    const header = locale
-        ? localesOf(r).length > 1
-            ? `<nav><a class="country" href="/?change">${esc(countryName(locale.country, ll))} · ${esc(market?.currency ?? '')}</a></nav>`
-            : ''
-        : `<nav>${markets.map((x) => `<a href="?market=${encodeURIComponent(x.code)}">${esc(x.name)}</a>`).join(' ')}</nav>`;
-    return page(r, { lang: locale ? tag(locale) : 'en', title, head: locale ? alternates(localesOf(r), path) : '', header, body, description: tagline, home: `${prefix}/${keep}` });
-}
-const xml = (t) => String(t ?? '').replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&apos;' })[c]);
-/** A 1×1 PNG: the stand-in for a generated PNG tile. */
-const PNG = Buffer.from('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNkqF9fDwAEAQG/jvkFNQAAAABJRU5ErkJggg==', 'base64');
-/** /tiles/<sku>.svg, /tiles/<sku>.png and /tiles/hero.svg: a plain stand-in for the store host's generated tiles. */
-export function renderTile(r, path, search) {
-    const png = path.match(/^\/tiles\/([^/]+)\.png$/);
-    if (png) {
-        let sku;
-        try {
-            sku = decodeURIComponent(png[1]);
-        }
-        catch {
-            return null;
-        }
-        if (!r.applied?.products[sku])
-            return null;
-        return { status: 200, headers: { 'content-type': 'image/png', 'cache-control': 'public, max-age=300', 'x-content-type-options': 'nosniff' }, body: PNG };
-    }
-    const m = path.match(/^\/tiles\/([^/]+)\.svg$/);
-    if (!m)
-        return null;
-    const color = /^#([0-9a-f]{3}|[0-9a-f]{6})$/i.test(r.theme?.color ?? '') ? r.theme.color : '#2f5d50';
-    const headers = { 'content-type': 'image/svg+xml', 'cache-control': 'public, max-age=300', 'x-content-type-options': 'nosniff' };
-    let svg;
-    if (m[1] === 'hero')
-        svg = `<svg xmlns="http://www.w3.org/2000/svg" width="2400" height="900" viewBox="0 0 2400 900"><rect width="2400" height="900" fill="${color}"/><circle cx="1900" cy="450" r="360" fill="#ffffff" fill-opacity="0.12"/></svg>`;
-    else {
-        let sku;
-        try {
-            sku = decodeURIComponent(m[1]);
-        }
-        catch {
-            return null;
-        }
-        const p = r.applied?.products[sku];
-        if (!p)
-            return null;
-        svg = `<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="1200" viewBox="0 0 1200 1200"><rect width="1200" height="1200" fill="${color}" fill-opacity="0.08"/><text x="600" y="600" text-anchor="middle" font-family="system-ui, sans-serif" font-size="72" fill="${color}">${xml(texts(p, search?.get('lang') ?? '').name.slice(0, 60))}</text></svg>`;
-    }
-    return { status: 200, headers, body: svg };
-}

package/dist/api/stub/ucp.js

@@ -1,377 +0,0 @@
-// Everything a store host serves: the UCP profile and REST service, the OAuth
-// surface for identity linking, the permalink, the policy and continue pages,
-// and the published storefront. This is the spec of the Worker behind
-// *.sandbox.commercelayer.store.
-import crypto from 'node:crypto';
-import { agentProfile, AGENT_PROFILE_URL, capabilityEntry, EXTENSIONS, SANDBOX_HANDLER, SANDBOX_HANDLER_ID, SANDBOX_HANDLER_SCHEMA, SANDBOX_HANDLER_SPEC, SHOPPING_CAPABILITIES, UCP, UCP_VERSION } from '../../ucp/platform.js';
-import { contentDigest, signHeaders } from '../../ucp/signing.js';
-import { strip } from './db.js';
-import { json } from './http.js';
-import * as shop from './shopping.js';
-import { esc, renderTheme, renderTile } from './theme.js';
-import { ucpLanguage } from './locale.js';
-const SCOPES = ['dev.ucp.shopping.order:read', 'dev.ucp.shopping.order:manage'];
-const OUR_CAPABILITIES = [...SHOPPING_CAPABILITIES, 'dev.ucp.common.ask', ...Object.keys(EXTENSIONS), 'dev.ucp.common.identity_linking', 'dev.ucp.shopping.permalink'];
-// ---------- profile
-export function profile(r, origin) {
-    const service = (schema) => [{ version: UCP_VERSION, spec: `${UCP}/specification/overview`, transport: 'rest', schema: `${UCP}/services/${schema}/rest.openapi.json`, endpoint: `${origin}/ucp/v1` }];
-    const capabilities = {};
-    for (const name of OUR_CAPABILITIES) {
-        const extra = {};
-        if (name === 'dev.ucp.common.identity_linking')
-            extra.config = { scopes: Object.fromEntries(SCOPES.map((s) => [s, { description: { plain: s.endsWith(':read') ? 'View your orders and their status.' : 'Cancel or return your orders.' } }])) };
-        if (name === 'dev.ucp.shopping.permalink')
-            extra.config = { endpoint: `${origin}/buy` };
-        if (name === 'dev.ucp.shopping.fulfillment')
-            extra.config = { method_combinations: [['shipping']] };
-        capabilities[name] = [capabilityEntry(name, extra)];
-    }
-    return {
-        ucp: {
-            version: UCP_VERSION,
-            services: { 'dev.ucp.shopping': service('shopping'), 'dev.ucp.common': service('common') },
-            capabilities,
-            payment_handlers: {
-                [SANDBOX_HANDLER]: [{ id: SANDBOX_HANDLER_ID, version: UCP_VERSION, spec: SANDBOX_HANDLER_SPEC, schema: SANDBOX_HANDLER_SCHEMA, available_instruments: [{ type: 'card' }], config: { environment: 'sandbox' } }],
-            },
-        },
-        keys: [r.ucp.public_jwk],
-    };
-}
-// ---------- negotiation
-/** What the platform behind a UCP-Agent URL supports. The stub knows this CLI's profile; any other HTTPS platform is taken at face value. */
-function negotiate(platformUrl) {
-    let theirs = null;
-    if (platformUrl === AGENT_PROFILE_URL)
-        theirs = agentProfile();
-    const ours = new Set(OUR_CAPABILITIES);
-    if (!theirs)
-        return { shared: ours, webhookUrl: null };
-    const shared = new Set();
-    const caps = theirs.ucp.capabilities ?? {};
-    for (const name of ours)
-        if ((caps[name] ?? []).some((e) => e.version === UCP_VERSION))
-            shared.add(name);
-    let changed = true;
-    while (changed) {
-        changed = false;
-        for (const [ext, parents] of Object.entries(EXTENSIONS)) {
-            if (shared.has(ext) && !parents.some((p) => shared.has(p))) {
-                shared.delete(ext);
-                changed = true;
-            }
-        }
-    }
-    const webhookUrl = caps['dev.ucp.shopping.order']?.[0]?.config?.webhook_url ?? null;
-    return { shared, webhookUrl };
-}
-// ---------- the REST service
-const protocolError = (status, code, content, headers = {}) => json(status, { code, content }, headers);
-function withUcpHeaders(r, res) {
-    const digest = contentDigest(res.body.toString());
-    const values = { '@status': String(res.status), 'content-digest': digest, 'content-type': res.headers['content-type'] ?? 'application/json' };
-    const sig = signHeaders('sig1', values, { components: ['@status', 'content-digest', 'content-type'], keyid: r.ucp.kid, created: Math.floor(Date.now() / 1000) }, r.ucp.private_jwk);
-    return { ...res, headers: { ...res.headers, 'content-digest': digest, ...sig } };
-}
-function handleService(req, r, origin, path) {
-    // 1. Who is calling: UCP-Agent names the platform profile; Request-Id is required.
-    const agent = req.headers['ucp-agent']?.match(/profile="(https:\/\/[^"]+)"/);
-    if (!agent)
-        return protocolError(400, 'invalid_profile_url', 'UCP-Agent must be `profile="https://..."`, an HTTPS URL of the platform profile.');
-    if (!req.headers['request-id'])
-        return protocolError(400, 'missing_request_id', 'Request-Id is required on every request.');
-    const { shared, webhookUrl } = negotiate(agent[1]);
-    const ctx = { record: r, origin, platform: agent[1], shared, webhookUrl, bearer: bearerOf(req) };
-    // 2. Body integrity and idempotency.
-    const body = req.body ?? '';
-    if (req.headers['content-digest'] && req.headers['content-digest'] !== contentDigest(body))
-        return protocolError(400, 'digest_mismatch', 'Content-Digest does not match the body.');
-    let parsed = {};
-    if (body) {
-        try {
-            parsed = JSON.parse(body);
-        }
-        catch {
-            return protocolError(400, 'invalid_json', 'The body is not valid JSON.');
-        }
-    }
-    const mutating = req.method !== 'GET' && !path.startsWith('/catalog/') && path !== '/ask';
-    const key = req.headers['idempotency-key'];
-    const digest = contentDigest(body);
-    if (mutating) {
-        if (!key)
-            return protocolError(400, 'missing_idempotency_key', 'Idempotency-Key is required on operations that change state.');
-        const seen = r.ucp.idempotency[`${req.method} ${path} ${key}`];
-        if (seen) {
-            if (seen.digest !== digest)
-                return protocolError(409, 'idempotency_key_reused', 'Idempotency-Key was already used with a different body.');
-            return { status: seen.status, headers: { ...seen.headers, 'idempotent-replayed': 'true' }, body: seen.body };
-        }
-    }
-    // 3. The operation, in the language the platform asked for (or the buyer's country's, or the base).
-    ctx.language = ucpLanguage(r, parsed?.context, req.headers['accept-language']);
-    ctx.country = typeof parsed?.context?.address_country === 'string' ? parsed.context.address_country : undefined;
-    const res = dispatch(ctx, req.method, path, parsed);
-    res.headers['content-language'] = ctx.language;
-    if (mutating && key)
-        r.ucp.idempotency[`${req.method} ${path} ${key}`] = { digest, status: res.status, headers: res.headers, body: res.body.toString() };
-    return res;
-}
-function dispatch(ctx, method, path, body) {
-    const r = ctx.record;
-    const out = (status, data) => withUcpHeaders(r, json(status, strip(data)));
-    const needs = (cap) => (ctx.shared.has(cap) ? null : out(200, shop.errorResponse(ctx, 'checkout', 'capabilities_incompatible', `${cap} is not shared with this platform.`)));
-    let m;
-    if (method === 'POST' && path === '/catalog/search')
-        return needs('dev.ucp.shopping.catalog.search') ?? out(200, shop.searchCatalog(ctx, body));
-    if (method === 'POST' && path === '/catalog/lookup')
-        return needs('dev.ucp.shopping.catalog.lookup') ?? out(200, shop.lookupCatalog(ctx, body));
-    if (method === 'POST' && path === '/catalog/product')
-        return needs('dev.ucp.shopping.catalog.lookup') ?? out(200, shop.getProduct(ctx, body));
-    if (method === 'POST' && path === '/carts') {
-        const blocked = needs('dev.ucp.shopping.cart');
-        if (blocked)
-            return blocked;
-        const created = shop.createCart(ctx, body);
-        return out(created.status, created.body);
-    }
-    if ((m = path.match(/^\/carts\/([^/]+)$/))) {
-        if (method === 'GET')
-            return needs('dev.ucp.shopping.cart') ?? out(200, shop.getCart(ctx, m[1]));
-        if (method === 'PUT')
-            return needs('dev.ucp.shopping.cart') ?? out(200, shop.updateCart(ctx, m[1], body));
-    }
-    if (method === 'POST' && (m = path.match(/^\/carts\/([^/]+)\/cancel$/)))
-        return needs('dev.ucp.shopping.cart') ?? out(200, shop.cancelCart(ctx, m[1]));
-    if (method === 'POST' && path === '/checkout-sessions') {
-        const blocked = needs('dev.ucp.shopping.checkout');
-        if (blocked)
-            return blocked;
-        const created = shop.createCheckout(ctx, body);
-        return out(created.status, created.body);
-    }
-    if ((m = path.match(/^\/checkout-sessions\/([^/]+)$/))) {
-        if (method === 'GET')
-            return needs('dev.ucp.shopping.checkout') ?? out(200, shop.getCheckout(ctx, m[1]));
-        if (method === 'PUT')
-            return needs('dev.ucp.shopping.checkout') ?? out(200, shop.updateCheckout(ctx, m[1], body));
-    }
-    if (method === 'POST' && (m = path.match(/^\/checkout-sessions\/([^/]+)\/complete$/)))
-        return needs('dev.ucp.shopping.checkout') ?? out(200, shop.completeCheckout(ctx, m[1], body));
-    if (method === 'POST' && (m = path.match(/^\/checkout-sessions\/([^/]+)\/cancel$/)))
-        return needs('dev.ucp.shopping.checkout') ?? out(200, shop.cancelCheckout(ctx, m[1]));
-    if (method === 'GET' && (m = path.match(/^\/orders\/([^/]+)$/))) {
-        const blocked = needs('dev.ucp.shopping.order');
-        if (blocked)
-            return blocked;
-        const order = shop.getOrder(ctx, m[1]);
-        if (!order)
-            return out(200, shop.errorResponse(ctx, 'order', 'not_found', `No order ${m[1]}.`));
-        const auth = authorize(ctx, order);
-        if (auth)
-            return auth;
-        return out(200, order);
-    }
-    if (method === 'POST' && path === '/ask')
-        return needs('dev.ucp.common.ask') ?? out(200, shop.ask(ctx, body));
-    return protocolError(404, 'not_found', `No operation ${method} ${path} in this service.`);
-}
-/** Orders are private: the platform that placed one, or a buyer token with the order scope, may read it. */
-function authorize(ctx, order) {
-    const r = ctx.record;
-    const issuer = ctx.origin;
-    const bearer = ctx.bearer;
-    if (bearer) {
-        const t = r.ucp.tokens[bearer];
-        if (!t || new Date(t.expires_at) < new Date()) {
-            return json(401, { ucp: shop.envelope(ctx, 'order', 'error'), messages: [{ type: 'error', code: 'identity_required', content: 'The token is invalid or expired.', severity: 'requires_buyer_review' }] }, { 'www-authenticate': `Bearer realm="${issuer}", error="invalid_token"` });
-        }
-        if (!t.scope.split(' ').some((s) => SCOPES.includes(s))) {
-            return json(403, { ucp: shop.envelope(ctx, 'order', 'error'), messages: [{ type: 'error', code: 'insufficient_scope', content: `Reading orders needs ${SCOPES[0]}.`, severity: 'requires_buyer_review' }] }, { 'www-authenticate': `Bearer realm="${issuer}", error="insufficient_scope", scope="${SCOPES[0]}"` });
-        }
-        return null;
-    }
-    if (order._platform === ctx.platform)
-        return null;
-    return json(401, { ucp: shop.envelope(ctx, 'order', 'error'), messages: [{ type: 'error', code: 'identity_required', content: 'Sign in to see this order.', severity: 'requires_buyer_review' }] }, { 'www-authenticate': `Bearer realm="${issuer}"` });
-}
-// ---------- OAuth 2.0 for identity linking (RFC 8414 metadata, PKCE, client credentials)
-function oauthMetadata(origin) {
-    return {
-        issuer: origin,
-        authorization_endpoint: `${origin}/oauth/authorize`,
-        token_endpoint: `${origin}/oauth/token`,
-        revocation_endpoint: `${origin}/oauth/revoke`,
-        jwks_uri: `${origin}/oauth/jwks`,
-        scopes_supported: SCOPES,
-        response_types_supported: ['code'],
-        grant_types_supported: ['authorization_code', 'refresh_token', 'client_credentials'],
-        code_challenge_methods_supported: ['S256'],
-        token_endpoint_auth_methods_supported: ['none', 'client_secret_basic'],
-        authorization_response_iss_parameter_supported: true,
-    };
-}
-function form(body) {
-    return Object.fromEntries(new URLSearchParams(body ?? ''));
-}
-function handleOauth(req, r, origin, path) {
-    const u = r.ucp;
-    const oauthError = (error, description, status = 400) => json(status, { error, error_description: description });
-    if (path === '/.well-known/oauth-authorization-server' && req.method === 'GET')
-        return json(200, oauthMetadata(origin), { 'cache-control': 'public, max-age=300' });
-    if (path === '/oauth/jwks' && req.method === 'GET')
-        return json(200, { keys: [u.public_jwk] });
-    if (path === '/oauth/authorize' && req.method === 'GET') {
-        const q = Object.fromEntries(req.url.searchParams);
-        if (q.response_type !== 'code' || !q.client_id || !q.redirect_uri || !q.code_challenge || q.code_challenge_method !== 'S256') {
-            return oauthError('invalid_request', 'response_type=code, client_id, redirect_uri, code_challenge and code_challenge_method=S256 are required.');
-        }
-        // A sandbox has no users: the buyer is signed in and consents at once.
-        const code = crypto.randomBytes(16).toString('hex');
-        u.codes[code] = { client_id: q.client_id, redirect_uri: q.redirect_uri, scope: q.scope ?? SCOPES[0], code_challenge: q.code_challenge, expires_at: new Date(Date.now() + 600_000).toISOString() };
-        const location = new URL(q.redirect_uri);
-        location.searchParams.set('code', code);
-        if (q.state)
-            location.searchParams.set('state', q.state);
-        location.searchParams.set('iss', origin);
-        return { status: 302, headers: { location: location.toString(), 'cache-control': 'no-store' }, body: '' };
-    }
-    if (path === '/oauth/token' && req.method === 'POST') {
-        const f = form(req.body);
-        let scope = f.scope ?? SCOPES[0];
-        let client = f.client_id ?? 'anonymous';
-        if (f.grant_type === 'authorization_code') {
-            const c = u.codes[f.code ?? ''];
-            if (!c || new Date(c.expires_at) < new Date())
-                return oauthError('invalid_grant', 'Unknown or expired code.');
-            if (c.redirect_uri !== f.redirect_uri || c.client_id !== f.client_id)
-                return oauthError('invalid_grant', 'redirect_uri or client_id do not match the authorization request.');
-            const challenge = crypto.createHash('sha256').update(f.code_verifier ?? '').digest('base64url');
-            if (challenge !== c.code_challenge)
-                return oauthError('invalid_grant', 'PKCE verification failed.');
-            delete u.codes[f.code];
-            scope = c.scope;
-            client = c.client_id;
-        }
-        else if (f.grant_type !== 'client_credentials')
-            return oauthError('unsupported_grant_type', 'Use authorization_code or client_credentials.');
-        const token = `at_${crypto.randomBytes(16).toString('hex')}`;
-        u.tokens[token] = { client_id: client, scope, expires_at: new Date(Date.now() + 3600_000).toISOString() };
-        return json(200, { access_token: token, token_type: 'Bearer', expires_in: 3600, scope }, { 'cache-control': 'no-store' });
-    }
-    if (path === '/oauth/revoke' && req.method === 'POST') {
-        delete u.tokens[form(req.body).token ?? ''];
-        return { status: 200, headers: {}, body: '' };
-    }
-    return null;
-}
-// ---------- permalink, pages, storefront
-const html = (status, title, body, headers = {}) => ({
-    status,
-    headers: { 'content-type': 'text/html; charset=utf-8', ...headers },
-    body: `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>${title}</title></head><body><main><h1>${title}</h1>${body}</main></body></html>\n`,
-});
-function handlePermalink(req, r, origin, path) {
-    const safe = { 'cache-control': 'no-store', 'referrer-policy': 'no-referrer' };
-    const items = path.replace(/^\/buy\/?/, '');
-    const lines = [];
-    if (items) {
-        if (!/^(?:[A-Za-z0-9._-]+|~[A-Za-z0-9_-]+):[1-9][0-9]*(?:,(?:[A-Za-z0-9._-]+|~[A-Za-z0-9_-]+):[1-9][0-9]*)*$/.test(items)) {
-            return { status: 303, headers: { location: `${origin}/`, ...safe }, body: '' };
-        }
-        for (const part of items.split(',')) {
-            const [token, qty] = part.split(':');
-            const itemId = token.startsWith('~') ? Buffer.from(token.slice(1), 'base64url').toString('utf8') : token;
-            lines.push({ item: { id: itemId }, quantity: Number(qty) });
-        }
-    }
-    const body = { line_items: lines };
-    for (const [k, v] of req.url.searchParams) {
-        if (k === 'continue_to')
-            continue;
-        const pointer = k.replace(/^\/+/, '').split('/');
-        if (pointer[0] === 'context' || pointer[0] === 'buyer')
-            (body[pointer[0]] ??= {})[pointer[1]] = v;
-        if (pointer[0] === 'discounts' && pointer[1] === 'codes')
-            ((body.discounts ??= {}).codes ??= []).push(v);
-    }
-    const ctx = { record: r, origin, platform: 'permalink', shared: new Set(OUR_CAPABILITIES) };
-    const created = lines.length ? shop.createCart(ctx, body) : null;
-    const cartId = created?.body?.id;
-    let target = `${origin}/`;
-    const cont = req.url.searchParams.get('continue_to');
-    if (cont && /^\/(?!\/)[^\s\\]*$/.test(cont))
-        target = new URL(cont, origin).toString();
-    else if (cartId)
-        target = `${origin}/carts/${cartId}`;
-    return { status: 303, headers: { location: target, ...safe }, body: '' };
-}
-const MIME = { html: 'text/html; charset=utf-8', css: 'text/css', js: 'text/javascript', mjs: 'text/javascript', json: 'application/json', svg: 'image/svg+xml', png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', webp: 'image/webp', gif: 'image/gif', avif: 'image/avif', ico: 'image/x-icon', txt: 'text/plain' };
-function serveStorefront(r, path, search, headers) {
-    const files = r.ucp.files;
-    // /tiles/ is the store host's own, in front of a custom storefront too: unknown tiles are a 404.
-    if (path.startsWith('/tiles/'))
-        return renderTile(r, path, search) ?? html(404, 'Not found', `<p>No ${path} on this store.</p>`);
-    // Agent-only: no pages for humans beyond what UCP needs; the images stay, UCP's media point at them.
-    const agentOnly = r.storefront_mode === 'agent-only';
-    // Links shared while the store was hosted land on the agent page.
-    if (agentOnly && /^(\/[a-z]{2}-[a-z]{2})?\/(products|categories)\/./.test(path))
-        return { status: 302, headers: { location: '/' }, body: '' };
-    if (agentOnly && path === '/')
-        return html(200, r.name ?? r.org, `<p>${esc(r.name ?? r.org)} sells to shopping agents over UCP: <a href="/.well-known/ucp">/.well-known/ucp</a>.</p>`);
-    // A custom storefront (an uploaded index.html) serves every path; otherwise the theme renders its routes.
-    if (!agentOnly && files['index.html'] === undefined) {
-        const page = renderTheme(r, path, search, headers);
-        if (page)
-            return page;
-    }
-    // /img/ is the store's images (uploaded by apply), whatever is in front of them.
-    const asset = r.asset_files?.[path.replace(/^\//, '')];
-    if (asset !== undefined) {
-        const ext = path.split('.').pop() ?? '';
-        return { status: 200, headers: { 'content-type': MIME[ext] ?? 'application/octet-stream' }, body: Buffer.from(asset, 'base64').toString('binary') };
-    }
-    if (agentOnly)
-        return html(404, 'Not found', `<p>This store has no pages for ${esc(path)}: it sells over UCP.</p>`);
-    const candidates = [path.replace(/^\//, ''), `${path.replace(/^\/|\/$/g, '')}/index.html`.replace(/^\//, ''), ...(path === '/' ? ['index.html'] : [])];
-    for (const c of candidates) {
-        if (files[c] !== undefined) {
-            const ext = c.split('.').pop() ?? '';
-            return { status: 200, headers: { 'content-type': MIME[ext] ?? 'application/octet-stream' }, body: Buffer.from(files[c], 'base64').toString(ext in MIME && !MIME[ext].startsWith('image') ? 'utf8' : 'binary') };
-        }
-    }
-    return html(404, 'Not found', `<p>No ${path} in this storefront.</p>`);
-}
-// ---------- the host
-export function handleUcp(req, r) {
-    const origin = `https://${req.url.hostname}`;
-    const path = req.url.pathname.replace(/\/+$/, '') || '/';
-    if (path === '/.well-known/ucp' && req.method === 'GET')
-        return json(200, profile(r, origin), { 'cache-control': 'public, max-age=300' });
-    const oauth = handleOauth(req, r, origin, path);
-    if (oauth)
-        return oauth;
-    if (path.startsWith('/ucp/v1/') || path === '/ucp/v1') {
-        const res = handleService({ ...req, headers: { ...req.headers } }, r, origin, path.slice('/ucp/v1'.length) || '/');
-        return res;
-    }
-    if (path === '/buy' || path.startsWith('/buy/'))
-        return handlePermalink(req, r, origin, path);
-    let m;
-    if ((m = path.match(/^\/policies\/(privacy|terms|returns)$/))) {
-        const titles = { privacy: 'Privacy policy', terms: 'Terms of service', returns: 'Returns' };
-        return html(200, titles[m[1]], `<p>Default sandbox ${titles[m[1]].toLowerCase()} for ${r.org}. Set <code>policies</code> in store.yml to use your own.</p>`);
-    }
-    if ((m = path.match(/^\/(carts|checkout-sessions|orders)\/([^/]+)$/))) {
-        const kind = m[1] === 'carts' ? 'cart' : m[1] === 'orders' ? 'order' : 'checkout';
-        const found = kind === 'cart' ? r.ucp.carts[m[2]] : kind === 'order' ? r.ucp.orders[m[2]] : r.ucp.checkouts[m[2]];
-        if (!found)
-            return html(404, 'Not found', `<p>No ${kind} ${m[2]}.</p>`);
-        return html(200, `${kind === 'order' ? `Order ${found.label}` : `Your ${kind}`}`, `<p>${kind === 'order' ? 'Thank you. ' : ''}${found.line_items.length} line item(s), ${found.currency} ${(found.totals.at(-1).amount / 100).toFixed(2)}.</p>`);
-    }
-    return serveStorefront(r, path, req.url.searchParams, req.headers);
-}
-/** Lets the service read the bearer token for order authorization. */
-export function bearerOf(req) {
-    return req.headers.authorization?.replace(/^Bearer /i, '');
-}

package/dist/api/transport.js

@@ -1,57 +0,0 @@
-// One way to send HTTP requests, for both the management client and the UCP buyer:
-// over the network, or in-process to the stub when C11R_API_URL=stub.
-// When the API URL points at a local server, requests to other hosts (the store
-// hosts) are rewritten to that server's /-/<host>/ prefix, so one local process
-// stands in for the whole platform.
-import { fail } from '../output.js';
-import { handle } from './stub/index.js';
-import { USER_AGENT } from '../version.js';
-export const DEFAULT_API_URL = 'https://api.commercelayer.ai';
-export const apiUrl = () => process.env.C11R_API_URL ?? DEFAULT_API_URL;
-/** Where a request goes: to a local API, other hosts through its /-/<host>/ prefix. */
-function targetOf(url) {
-    const base = apiUrl();
-    const baseUrl = new URL(base);
-    const targetUrl = new URL(url);
-    if (base !== DEFAULT_API_URL && targetUrl.host !== baseUrl.host && !url.startsWith(base)) {
-        return `${base.replace(/\/$/, '')}/-/${targetUrl.host}${targetUrl.pathname}${targetUrl.search}`;
-    }
-    return url;
-}
-export async function send(method, url, headers = {}, body) {
-    const base = apiUrl();
-    const lower = {};
-    for (const [k, v] of Object.entries(headers))
-        lower[k.toLowerCase()] = v;
-    // On every request, to the API and to stores: the API tells an outdated CLI so (cli_outdated).
-    lower['user-agent'] ??= USER_AGENT;
-    if (body !== undefined && !lower['content-type'])
-        lower['content-type'] = 'application/json';
-    if (base === 'stub') {
-        const r = handle({ method, url: new URL(url), headers: lower, body });
-        return { ...r, body: r.body.toString() };
-    }
-    const target = targetOf(url);
-    let res;
-    try {
-        // Never follow redirects: UCP forbids it for profiles, and the 302/303 of
-        // /oauth/authorize and the permalink are the answer, not a hop.
-        res = await fetch(target, { method, headers: lower, body, redirect: 'manual' });
-    }
-    catch (e) {
-        fail('api_unreachable', `Could not reach ${new URL(target).origin}: ${e.message}`, 'Check the network. If you are developing the CLI, run `npm run stub-api` and set C11R_API_URL=http://localhost:4747, or set it to "stub".');
-    }
-    const resHeaders = {};
-    res.headers.forEach((v, k) => (resHeaders[k] = v));
-    return { status: res.status, headers: resHeaders, body: await res.text() };
-}
-/** A file over GET, as bytes, within timeoutMs; redirects are followed (images sit behind CDNs). Throws on failure. */
-export async function download(url, timeoutMs) {
-    const headers = { 'user-agent': USER_AGENT, accept: 'image/*' };
-    if (apiUrl() === 'stub') {
-        const r = handle({ method: 'GET', url: new URL(url), headers });
-        return { status: r.status, type: r.headers['content-type'] ?? '', bytes: Buffer.from(r.body) };
-    }
-    const res = await fetch(targetOf(url), { headers, signal: AbortSignal.timeout(timeoutMs) });
-    return { status: res.status, type: res.headers.get('content-type') ?? '', bytes: Buffer.from(await res.arrayBuffer()) };
-}

package/dist/api/types.js

@@ -1,4 +0,0 @@
-// The contract between the CLI and api.commercelayer.ai (the management API).
-// The store hosts speak UCP, which has its own spec; src/ucp/ is the client side.
-// stub/ implements both locally until the real platform exists.
-export {};